Redundant fieldbus system

ABSTRACT

A redundant fieldbus system provides power and communications in a parallel physical configuration between the host system and attached field devices irrespective of any single point failure in the network. In case of a fault, the redundant fieldbus system automatically eliminates the faulty section of the network, switches power and communications to the healthy portion of the network and terminates the network for signal integrity. A device coupler for the system may include a fault detector coupled to an auto-termination circuit that terminates a fieldbus cable when a fault is detected. The device coupler may include fault detection and isolation coupled to each set of spur terminals used to connect field devices to the device coupler. A field device for the system may include circuitry for deselecting a faulty cable while maintaining connection to a healthy cable.

BACKGROUND

1. Field of the Invention

The present invention relates to an automation or control network such as a fieldbus network that facilitates an extended level of redundancy such as redundancy within the power distribution facilities of a fieldbus network.

2. Description of the Related Art

Fieldbus networks are advantageously used in industrial control systems and particularly in industrial control systems that provide distributed control incorporating field devices having local processors. A fieldbus network is a two-wire network capable of delivering DC power to remotely installed field devices and capable of providing bidirectional digital communications between the remote field devices and the host system. The digital communications are typically carried on a 31.25 kHz carrier signal in the standard-defined H1 fieldbus network. Various field devices might be attached to be powered from and communicate over the network, including controllers, actuators and sensors. Multiple field devices can be attached to one fieldbus segment. The fieldbus is typically implemented on the physical level as two-wire shielded cable. More details about conventional aspects and implementations of fieldbus networks can be found in the International Electrotechnical Commission standard IEC 61158-2 which is specifically for industrial networks and promoted by the FOUNDATION Fieldbus and PROFIBUS organizations.

On the host system side of the fieldbus network, primary and backup H1 cards are mounted as front end interface modules to the networked field devices to provide continuous communications. The backup H1 card provides redundancy and takes over the communications between the host and the field devices in case the primary H1 card fails due to any reason. Each H1 card might be configured to provide more than one channel or more than one segment per card, depending on the manufacturer.

For simplicity, the following discussion refers to one fieldbus segment per H1 card, but implementations can readily provide more segments per card. In a conventional system, the output connection of the primary and the backup H1 cards can be linked together at the host system so that one single two-wire cable can be interfaced directly between the conditioned power modules and the H1 cards. In some other implementations, both H1 cards can be wired individually to the conditioned power modules so that the common link between the cables is made at the power modules. The latter method is used to provide an additional cable redundancy between the H1 cards and the conditioned power modules.

The conditioned power modules also provide DC power to remote field devices via a single two-wire cable connected to an electronic device coupler. Some types of conditioned power modules are designed with a redundancy feature in a fashion similar to H1 cards. When two conditioned power supplies with this redundancy feature are connected in parallel to the networked field devices, both power supply modules operate together and share the same load. If either of the power supply modules fails, the remaining, healthy power supply module will supply the extra power to the load (i.e., the field devices).

In a fieldbus network, the communication signals should be terminated at both ends of the network cable. A matching terminator circuit is fitted at the front end of the power module, and another matching terminator circuit is mounted at the last node of the network. A typical network may have multiple drop or spur connections that each interface to one or more local field devices.

FIG. 1 is a schematic circuit diagram that illustrates the common method of installation recommended by the IEC 61158-2 standard. FIG. 1 shows a fieldbus network 10 in which all field devices D1, Dn (n could be up to 32 devices per segment) are linked to the host through primary H1 card 12 and backup H1 card 14 and through the single cable 16. Cable 16 and the communication signals are terminated at both ends of the cable network by terminators T1 and T2. Primary conditioned power supply module 18 and secondary conditioned power supply module 20 are connected in parallel to bus 16 so as to share the load of the field devices D1, Dn. As illustrated, field devices may be connected to the network cable 16 through a device coupler 22. Typical device couplers 22 provide a standardized interface that allows for easier connection of spurs or individual field devices to the network cable 16. Some device couplers provide fuses or current limiting technology to address local faults and to provide local fault indicators. One of the restricting factors in FOUNDATION fieldbus technology is that the physical layer used for the H1 network does not naturally allow for redundancy. This lack of redundancy may in part lead to undesirable expense and down time for the fieldbus network.

SUMMARY OF THE PREFERRED EMBODIMENTS

An aspect of the present invention provides an apparatus for use in a redundant fieldbus system including first terminals adapted to connect to a first fieldbus cable and coupled to a field device to provide power and communications from a fieldbus network to the field device. The apparatus also includes second terminals adapted to connect to a second fieldbus cable and coupled to the field device to provide power and communications from the fieldbus network to the field device. Isolation circuitry is connected between the first terminals and the field device and connected between the second terminals and the field device. The isolation circuitry is adapted to provide power from either the first terminals or the second terminals to the field device and is further adapted to isolate a short circuit between the first terminals from a power source connected to the field device through the second terminals.

Another aspect of the invention provides an apparatus for use in a redundant fieldbus system comprising first terminals adapted to connect to a first fieldbus cable. The first terminals are coupled to a portion of a field device to provide power and communications from a fieldbus network to the field device. The apparatus includes second terminals adapted to connect to a second fieldbus cable. The second terminals are coupled to the portion of the field device to provide power and communications from the fieldbus network to the field device. Isolation circuitry is connected between the first terminals and the portion of the field device and is connected between the second terminals and the portion of the field device. The isolation circuitry is adapted to provide power from either the first terminals or the second terminals to the field device and is further adapted to isolate a short circuit between the first terminals from a power source connected to the field device through the second terminals.

BRIEF DESCRIPTION OF THE DRAWINGS

Aspects of the present invention are illustrated in the attached drawings and can be better understood by reference to those drawings in conjunction with the detailed description. The attached drawings form a part of the disclosure.

FIG. 1 schematically illustrates a conventional configuration of a fieldbus system according to the IEC 61158-2 standard.

FIG. 2 schematically illustrates a preferred configuration of a redundant fieldbus network according to the present invention.

FIG. 3 schematically illustrates another preferred configuration of a redundant fieldbus network according to the present invention.

FIG. 4 schematically illustrates a preferred conditioned power supply module that can be used advantageously in either the FIG. 2 network or the FIG. 3 network.

FIG. 5 schematically illustrates a preferred implementation of a device coupler that can be used advantageously in either the FIG. 2 network or the FIG. 3 network.

FIG. 6 schematically illustrates a preferred implementation of a field device in accordance with the present invention. The FIG. 6 field device provides can be used in redundant fieldbus networks and is advantageously used in the FIG. 2 or FIG. 3 networks.

FIG. 7 schematically illustrates one of the FIG. 6 field devices after a short has occurred on cable A and how the field device remains operational after a cable fault such as a short circuit on cable A in the diagram.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

The typical fieldbus system is robust. Unfortunately, the typical fieldbus system has a weakness in that the system uses a single power cable. The power and the communications signals for the fieldbus depend on the integrity of that single, twisted-pair cable between the host and the remote field devices. In conventional implementations, any cable fault will result in the unavailability of not only any associated field device but of all field devices on that network. As a result, the system loses its control and communications with the field devices. To provide reliability, availability and safety of fieldbus systems, the network cable is preferably fully protected and maintained. Alternately, a fieldbus system may be made completely and automatically redundant by supplying the network with cable fault detection and automatic signal termination.

Preferred aspects of the invention can be combined to provide complete fieldbus network redundancy from the front end interface of the H1 cards through the field devices, preserving network availability and continuous control over the process without user intervention. Preferred aspects of the present invention allow the fieldbus network to provide redundant cable runs that are independently available to the field devices. Other aspects of the invention can be used to automatically terminate the network cable to preserve signal integrity in the field if a power loss occurs on either the host or field side of the connection network. Still other aspects of the present invention, independently usable and advantageous, include a field device or device coupler adapted for use with redundant fieldbus cables where the field device or coupler incorporates short circuit protection or circuitry that automatically accommodates a cable fault such as a short circuit.

Any detected cable fault is preferably reported to the user, and the system preferably automatically directs communication signals to the healthy (no cable fault) path of the network to maintain the process under control. Preferred implementations of the system allow hot swapping of faulty items, such as power modules, H1 cards and cables without any downtime in the process associated with the fieldbus network. Preferred embodiments of the invention also offer a high degree of safety to critical application loops and full access to uninterruptible continuous process measurement.

FIG. 2 shows a schematic diagram of a preferred implementation of a redundant fieldbus system 30. In the FIG. 2 system, a primary H1 card 32 and a backup H1 card 34 within a redundant pair are connected to respective legs of the segment, fed into respective conditioned power supplies 36, 38 and wired out into the field. The primary and backup H1 cards provide the interface to the host control system 39. Each outlet cable 40, 42 is wired to a common device coupler 44 located close to the field devices D1, D2 and Dn. Here again, n represents the number of field devices such as controllers, actuators or sensors, and can be up to, for example, 32 field devices per segment. Here, the illustrated cables are any cables appropriate to the fieldbus network and are typically two-wire cables. The device coupler 44 is then wired to various field devices D1, D2 and Dn required by the process associated with the network 30. Segment termination T1, T2 is provided at the front end of each conditioned power supply 36, 38, so that the fieldbus network is fully terminated at each end. The illustrated network configuration provides a primary and redundant interface card, conditioned power supply and cable to the device coupler 44 so that the device coupler has a complete set of redundant facilities. This ensures that the device coupler 44 can provide power and communications to its connected field devices over independent paths.

Redundancy can also be achieved as shown in FIG. 3. Note that the components of the illustrated FIG. 3 fieldbus network are generally the same as those illustrated in the FIG. 2 network and so the same components are designated with the same numerals in FIGS. 2 and 3 and the above discussion is not repeated here. The primary 32 and the redundant 34 H1 cards are connected to the conditioned power modules, 36, 38 (primary and standby modules respectively), and a hardwire link 46 is made between the power modules 36, 38. Each outlet cable 40, 42 is wired to a common device coupler 44 located close to the field devices D1, D2 and Dn. Power and communications are provided via one cable at a time, while the other cable is kept in a standby state. If a cable fault occurs along the primary field cable 40, the standby power module 38 will take over to supply power to the device coupler 44 via cable 42 so that all field devices are kept powered. The process operates in the opposite order if the cable 42 has been made the primary cable and then suffers a failure, the conditioned power supply 36 will take over to supply power to the device coupler 44 over the cable 40 to keep the field devices powered. Front end segment terminator T1 is located at the power modules or at H1 cards, while the other segment terminator T2 is positioned inside the device coupler 44.

Each of the conditioned power supply modules 36, 38 preferably used in the FIG. 2 or FIG. 3 network most preferably incorporates an electronic circuit 50 like that shown in FIG. 4. Each of the preferred power supply modules 36, 38 (FIGS. 2, 3) delivers power to both the host system side and the remote field devices via two independent cables, 52 and 54, respectively. Note here that FIG. 2 schematically shows a continuous cable 40, 42 connecting the H1 interface card 32, 34 to the conditioned power supply module 36, 38 and through the device coupler 44 to the field devices D1, D2 and Dn. The actual implementation that is presently preferred for use in the FIGS. 2 and 3 networks is as illustrated in FIG. 4, where the field side cable 54 connects to the host side cable 52 through an inline noise filter 56, with the field and host side cables powered through substantially independent paths, as shown in FIG. 4.

Filter 56 most preferably couples the bidirectional communication signals between the cables 52 and 54 and suppresses high frequency noise that might be generated on the field side of the network. Power is supplied from module 50 (or 36 and 38 in FIGS. 2, 3) over the substantially independent paths within the FIG. 4 power module so that noise advantageously is not coupled to or from the host or field sides of the network. Most preferably, the power supply 50 can independently isolate cable faults on either the host or field side cables. Each power supply 50 is fitted with two electronic circuits 58, 60 that function as open circuit detectors to detect cable discontinuities or other faults on either the host system side 52 or the field side 54. The open circuit detectors 58, 60 measure the currents delivered to the host load and the field load across resistors R1 and R2, respectively.

In normal operation of the FIG. 4 power supply circuit, the host and field sides should draw minimum currents from the supply so that the open circuit detectors measure currents at or above the threshold values representing normal operation of a network free of cable faults. If at any time the drawn current on either the host or field side drops below the threshold values, the respective open circuit detector 58 or 60 sends an alarm to the control logic circuit 62 indicating a cable fault. The control logic circuit 62 detects the alarm signal and determines from which side (host or field) the cable connectivity was lost. Upon detecting a loss of cable continuity or other fault, the control logic circuit 62 releases two alarms, one local and one remote and directed to the user. The local alarm is sent to a local LED1 that indicates the fault at the conditioned power supply module and the remote alarm is sent to the user system via an optically isolated device 64. The control logic circuit 62 also sends a logic signal to either of the transistors Q1 or Q2 or to both, depending on the type of cable fault, to switch off the supply to indicate the side of the faulty connection or cable.

At the moment when the cable fault is detected as “open circuit,” the power supply unit 50 cuts off or ceases supplying power over cable 52 to the connected H1 card so that the H1 card stops functioning. This is accomplished by the control logic circuit 62 causing the transistor Q1 or Q2 or both to become non-conducting on the side or sides of the network the open circuit detectors 58, 60 indicate has a cable fault. When the transistor or transistors is turned off (non-conducting), power is removed from the H1 card on the side of the network with the cable fault and that H1 card is disabled. Since the host controls both the primary 32 and the backup H1 cards 34, the host knows which H1 card is disabled and directs the communication signals via the still-functioning H1 card, presumably the backup H1 card. The host makes the backup H1 card the main communication module for communications with the field devices when the primary H1 card receives no power or loses power. The secondary or redundant conditioned power supply 38 always powers the backup H1 card and the device coupler 44 in the field so that the communication signals will be easily transmitted directly to the field devices and hence all field devices will remain under control.

Still referring to FIG. 4, short circuit detector 66 monitors the cable conditions on both the host system side and the field side for short circuits. The fieldbus network cable can be up to a 1000 meters long on each side (host and field) as described by the IEC61158-2 standard. For the fieldbus network illustrated in FIG. 3, the cable network can be 1900 meters as described in the IEC61158-2 standard. If a cable short circuit or other fault occurs on either side of the network cables, an excessive current will flow through the fault and back through R3. When this current exceeds the limit set by the short circuit detector 66, circuit 66 sends an alarm signal to the control logic circuit 62 and switches off Q3 to isolate the faulty part and limit current drain. The control logic circuit 62 sends two alarm signals, one to a local LED2 to indicate a cable short circuit fault at the conditioned power supply 36, 38 and the other alarm signal is sent to the user via the optically isolated device 64. Q3 stays open circuit as long as the cable is faulty. Once the cable fault is removed, the short circuit detector 66 switches Q3 on automatically. Thus, if a cable short circuit fault is detected on the primary H1 card 32 side, the primary H1 card 32 loses power and consequently the host system redirects the communication signals through the backup H1 card 34. Communication signals are carried over the other, healthy leg of the network as explained above.

FIG. 5 shows a device coupler 44 preferably used in the redundant fieldbus network of FIG. 2 or 3. The device coupler 44 of FIG. 5 is preferably connected to cables 40, 42 and through those cables to power supply modules 36, 38 as shown in FIG. 2 or 3. The device coupler as shown in FIG. 5 includes a diagnostic circuit connected to the primary and redundant network cables to detect when power is lost from the cables connected on the primary and backup sides as power inputs. On detection of a loss of power from either cable, most preferably the auto-terminator circuit is automatically activated to terminate the transmission line to avoid any distortion of the communication signals. Once the cable fault is removed, the auto-terminator preferably is automatically switched off and the system resumes communicating via the whole network. In this reset state the system is fully operational as a closed loop. If a cable short circuit fault develops on either side of the network, then the system communication signals will be diverted to the healthy H1 card side and transmitted via the healthy cable so that all field devices are still powered. The auto-terminator then switches on to allow normal function for the fieldbus devices.

FIG. 5 illustrates a schematic block diagram of the auto-termination circuit. Circuits 70 and 72 monitor the conditions of the input power supplies at both sides of the cable connection terminals. Input power supplies 74 and 76 correspond to the power provided over the cables 40, 42 shown in FIG. 2 or 3. If input power supplies 74 and 76 are present and outputting at values above the threshold values set by Zener diodes ZD1 and ZD2 (that is, there is no cable fault and the power supplies 36, 38 are operating), then both Q1 and Q2 are on, which makes Q3 of the terminator network 78 switch off. The cable length on both legs does not affect the functionality of circuits 70 and 72 irrespective of the voltage drops that are likely to occur due to the load (the field devices). The terminator network, circuit 78, includes an impedance matching circuit, which is a terminator resistor R1 connected in series with a terminating capacitor C1. Circuit elements D1, D2, D3, D4, D5, D6 are used for reverse polarity protection.

Once a cable fault (either a short or an open circuit) occurs on either side of the input supplies 74, 76, the voltage at the supplies will be below the threshold values of ZD1 or ZD2 or both, causing Q1 or Q2 or both to switch off and causing Q3 to switch on. This establishes the auto-terminating function. Once the failed input power is restored and remains above the threshold values of ZD1 and ZD2, Q1 and Q2 switch back to their on conditions, while Q3 switches off and the auto-terminating circuit becomes non-conducting. An alternative auto-terminating circuit that might be used is described in WIPO patent publication WO 2005/032060, which is based on current sensing technology. WIPO patent publication No. WO 2005/032060 is hereby incorporated by reference in its entirety and for all of its relevant teachings.

Circuit 80 provides spur short circuit protection. Circuit 80 is similar to the short circuit detector 66 discussed above with reference to FIG. 4 and so is not discussed in detail here. If a short circuit occurs across the spur connection, due to a cable short circuit or a faulty field device, the power to the faulty load will be switched off while all the rest of the field devices continue to be powered and communicate without any loss of signal or any additional voltage drop across the main network cable segment. In typical implementations of a redundant fieldbus system according to the present invention, the main network cable segment operates at a higher voltage because the current use by faulty devices is avoided. Circuits 82 and 84, representative of n spurs in this example, are similar to circuit 80 and are not described separately here for purposes of conciseness.

The device coupler 44 shown in FIG. 5 can couple up to 32 spur circuits, 80, 82 and so on, to the fieldbus network. Each spur output circuit is conventionally connected to one field device by a cable having a maximum length as specified by IEC 65118-2 of no more than 120 meters. The field device is powered by a single twisted pair cable in this conventional configuration. Here again, if a single cable fault occurs between the spur terminals and the field device, then the system loses control (power and communication) over the field device.

Particularly preferred implementations of field devices according to the present invention extend redundancy to the field device using a field device incorporating a circuit such as that illustrated in FIG. 6 so that two fieldbus cables, a primary cable and a redundant cable are connected to respective different sets of terminals on the field device. The primary cable A that connects the spur output circuit 80 to the field device preferably is terminated internal to the field device with two diodes (D1 and D2). Most preferably, another redundant cable B is wired from the spur output circuit 82 to the same field device via another two diodes (D3 and D4). Outputs of D1 and D3 are linked together and the outputs of D2 and D4 are connected together so that a single positive and a single negative connection are made to the field device via two routes and two spur cables, one primary and a second, redundant cable. In normal operation, power and communications can be provided to the field device over both the primary and redundant cables.

If cable A or cable B becomes an open circuit or is otherwise actually or effectively disconnected, then the other cable, B or A, would still provide power and communications to the field device. Also, if cable A or cable B has a fault such as a short circuit, one of D1 or D3 will be positioned in reverse polarity which means it will block any flow of current from the other cable and power supply to the cable fault. Similarly, D2 and D4 are also used to isolate a short circuit cable fault to prevent it from affecting the other cable, which is the healthy and still operating part of the network. In case of such a short circuit on, for example, cable A, the circuit effectively appears as shown in FIG. 7. While cable A is short circuited, cable B continues powering the FIGS. 6 and 7 field device and cable B continues carrying control communications and information to the field device. Of course, the opposite condition of a cable B short circuit can be accommodated by the same circuit configuration illustrated in FIG. 6.

The illustrated circuit configuration including D1, D2 and D3, D4 connected in the illustrated manner provides short circuit protection to the primary and redundant cables at the field device terminals. Also, having two cables running in parallel and connected to sets of terminals of the field device provides further redundancy and expanded operation conditions for preferred implementations of the fieldbus system.

As discussed above, fieldbus networks are characterized in that they provide DC power to attached field devices, such as controllers, actuators and sensors, and carry bidirectional digital communications between a system controller and the various field devices attached to the network segment. The digital communications are carried by an AC carrier that is, in many circumstances, a 31.25 kHz carrier signal as defined by the IEC 61158-2 standard. Particularly preferred implementations of the present invention can be implemented in FOUNDATION Fieldbus and PROFIBUS types of networks. Additional information regarding applications and configurations of advantageous fieldbus networks can be found at the websites and in the publications of the FOUNDATION Fieldbus and PROFIBUS organizations. Of course, successors to the present implementations of the standards and networks are anticipated and the present invention will find application in such networks.

In addition, while a single device coupler 44 is illustrated in exemplary FIGS. 2 and 3, it is possible to have multiple device couplers and multiple spans of network cables connected within a particular network. Different numbers of field devices may be provided, in different configurations, on the one or more device couplers. In other implementations, field devices can be attached without using device couplers. FIGS. 2 and 3 show modular configurations for the device couplers and the field devices. While this is presently preferred, it is nevertheless possible for the field devices to include aspects of the device couplers, such as the automatic termination circuitry described above.

The present invention has been described in terms of certain preferred embodiments. Those of ordinary skill in the art will appreciate that various modifications and alterations could be made to the specific preferred embodiments described here without varying from the teachings of the present invention. Consequently, the present invention is not intended to be limited to the specific preferred embodiments described here but instead the present invention is to be defined by the appended claims. 

1. An apparatus for use in a redundant fieldbus system, the apparatus comprising: first terminals adapted to connect to a first fieldbus cable, the first terminals coupled to a field device to provide power and communications from a fieldbus network to the field device; second terminals adapted to connect to a second fieldbus cable, the second terminals coupled to the field device to provide power and communications from the fieldbus network to the field device; and isolation circuitry connected between the first terminals and the field device and connected between the second terminals and the field device, the isolation circuitry adapted to provide power from either the first terminals or the second terminals to the field device, the isolation circuitry further adapted to isolate a short circuit between the first terminals from a power source connected to the field device through the second terminals.
 2. The apparatus of claim 1, wherein the apparatus is a device coupler providing independent current paths between the first terminals and the field device and between the second terminals and the field device, the apparatus further comprising first and second spur connection circuits.
 3. The apparatus of claim 2, wherein the first and second spur connection circuits respectively comprising a first fault detector and a second fault detector.
 4. The apparatus of claim 3, wherein the first fault detector comprises a short circuit detector for detecting a short circuit in a spur cable attached to the first spur connection circuit.
 5. The apparatus of claim 2, wherein the first and second spur connection circuits are connected to third and fourth terminals of a field device.
 6. The apparatus of claim 5, wherein the third terminals are coupled to a portion of the field device to provide power and communications from a fieldbus network to the field device, and wherein the fourth terminals are coupled to the portion of the field device to provide an alternative path for power and communications from the fieldbus network to the field device.
 7. The apparatus of claim 6, further comprising field device isolation circuitry connected between the third terminals and the portion of the field device and connected between the fourth terminals and the portion of the field device, the field device isolation circuitry adapted to provide power from either the third terminals or the fourth terminals to the portion of the field device, the field device isolation circuitry further adapted to isolate a short circuit between the third terminals from a power source connected to the field device through the fourth terminals.
 8. An apparatus for use in a redundant fieldbus system, the apparatus comprising: first terminals adapted to connect to a first fieldbus cable, the first terminals coupled to a portion of a field device to provide power and communications from a fieldbus network to the field device; second terminals adapted to connect to a second fieldbus cable, the second terminals coupled to the portion of the field device to provide power and communications from the fieldbus network to the field device; and isolation circuitry connected between the first terminals and the portion of the field device and connected between the second terminals and the portion of the field device, the isolation circuitry adapted to provide power from either the first terminals or the second terminals to the field device, the isolation circuitry further adapted to isolate a short circuit between the first terminals from a power source connected to the field device through the second terminals.
 9. The apparatus of claim 8, wherein the isolation circuitry comprises: first and second diodes respectively connected in series between the first terminals and the portion of the field device; and third and fourth diodes respectively connected in series between the second terminals and the portion of the field device.
 10. The apparatus of claim 8, wherein the field device is a controller, actuator or sensor. 